Executive Summary
Over 2,500 organizations were affected after LiteLLM was compromised through the Trivy hack and used to distribute infostealer malware.
What Happened
LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack appeared first on SecurityWeek .
Affected Products
- LiteLLM
- Trivy
Vulnerability / Attack Technique
AI library supply chain compromise
Technical Mechanism
Stolen publishing tokens enabled malicious releases.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Security tooling compromise cascaded into AI tooling.
Recommended Controls
- Rotate secrets on affected systems
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/over-2500-organizations-impacted-by-litellm-supply-chain-attack/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.